This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Tician
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Tician
06-12-2020
72Posts
14Likes
1Solution
Jun 12, 2020Last Visited
User
Activity
User
Profile
Latest posts by Tician
| Subject | Views | Posted |
|---|---|---|
| 2435 | 01-22-2019 06:00 AM | |
| 5343 | 12-01-2017 01:38 AM | |
| 1582 | 11-01-2017 06:06 AM | |
| 3584 | 11-01-2017 03:24 AM | |
| 4361 | 10-25-2017 07:22 AM | |
| 2255 | 09-29-2017 03:36 AM | |
| 4602 | 08-15-2017 05:27 AM | |
| 3405 | 02-08-2017 01:49 AM | |
| 2491 | 12-07-2016 05:50 AM | |
| 1341 | 04-05-2016 02:19 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-01-2015 01:03 AM | |
| 1 Like | 02-06-2015 10:15 AM | |
| 1 Like | 08-15-2017 05:27 AM | |
| 1 Like | 09-29-2017 03:36 AM | |
| 2 Likes | 12-07-2016 05:50 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 02-08-2011 12:30 AM |
| Date Last Visited | 06-12-2020 09:11 AM |
| Posts | 72 |
| Total Likes Received | 14 |
05-12-2022
05:56 AM
for this case I recommend to use layer 2 interface because vwire is only for physical interface and aggregate interface. You can improve on the following solutions: https://live.paloaltonetworks.com/t5/general-topics/palo-alto-layer-2-bridging/m-p/388782#M90540
... View more
10-20-2020
09:03 AM
Hi Valentine, Thank you for thi interesting approach, i would like to test this in lab. Can you point me to a direction on how to do the vlan tag rewriting on palo.
... View more
01-22-2019
06:00 AM
Hi, can you post some commands from cli how it works so easy? For me, it is not work from CLI either... Thanks!
... View more
12-01-2017
01:38 AM
Hi All, at least this is completely strange!? If you review my WF submission, framed part definitely is not seen by WF cloud for the first time, right? File has same name, same hash and it is marked as malicious?! Why this file with high severity, marked as malicious, repeatable allowed by PAN OS8.0? p.s. Off course all my profiles, antivirus and antispyware were tuned with reset-both action...
... View more
11-01-2017
06:06 AM
@BPry yes you're completely right, it is good to reset server connections in this case, so what should be scenario where you suggest to use reset client connections instead?
... View more
09-29-2017
04:27 AM
Hi Tician
there are 3 replies to your question! (#3 is the one that applies to your specific issue)
1. There is a place where you can submit NEW applications : https://researchcenter.paloaltonetworks.com/submit-an-application/
2. Feature requests should be asked through your local sales team, they can submit new and add your vot to existin Feature Requests
3. Any existing applications that are not working properly or have missing information, should be raised through a support ticket so our application development team can investigate and correct/update the existing app
... View more
12-07-2016
05:50 AM
2 Kudos
Hello All, what about feature request to distinguish between tls and non tls SMTP traffic? Is there something new in decryption of non https encrypted traffic in general? It might be good reason to open new topic on this issue, but this is huge security gap if consider that almost three years passed since this topic.....
... View more
04-05-2016
02:19 AM
Hi everyone,
is there any chance somehow to SPAN physical port from switch to VM port group in promiscuous mode, where I placed TAP port of my virtual firewall? Actually, is this supported in any way, or this interface mode is suited only for virtual environment, as well as Vwire mode?
... View more
12-18-2015
03:13 AM
4 Kudos
Hi
Depending on the issue you are trying to investigate some commands will be more useful than others
a good place to start is by looking in the debug logging, this will probably contain most of the information you're after:
> debug user-id on debug
> less mp-log useridd.log
when you're done don't forget to set debug level to a lower setting
> debug user-id on info
several show commands will come in handy to see if all the mappings/groups are working fine
> show user server-monitor state all
> show user server-monitor statistics
> show user user-IDs
> show user ip-user-mapping all
> show user group list
> show user group name <name>
> show user group-mapping state all
and some further debug commands:
to get a listing of all users
> debug user-id dump idmgr type user all
to get a listing of all groups:
> debug user-id dump idmgr type user-group all
you can also try resetting/clearing mapping if you need to manually refresh all the mappings (if the automatic update is failing or during troubleshooting)
> debug user-id reset group-mapping all > debug user-id refresh group-mapping all
> clear user-cache all
> clear user-cache-mp all
... View more
08-20-2015
08:59 AM
Hello again, I found the isue after a night's rest. I need to goto the VirtualSwitch Properties and set teh vlan tag to " all (4095) . Now I am good to go. regards, Don
... View more
08-05-2015
11:23 PM
Refer to the following document https://live.paloaltonetworks.com/docs/DOC-3300 How to Test WildFire with a Fake Malicious File Make sure that service route is pointing to correct interface Device>Setup>Service>Service route configuration Check for the interface used for wildfire. Rate the helpful answer.
... View more
04-29-2015
03:49 AM
1 Kudo
This depends on how you do the load balancing. If you need the PA to do the load balancing for the active/active then you will need to use one of those two methods and the extra ip addresses. But if the link load balancing occurs upstream or using routing protocols through the two links, then only the two interface addresses are required and not any of the floating addresses.
... View more
04-14-2015
02:49 PM
I think what you are seeing is that "preempt" is set on your primary and the attempts to take back mastership failed bringing the device to the non-operational state. In general, I would not use preempt at all. But leave a cluster failed over until you manually determine the failover event is complete and the primary is ready to take traffic again. But to be positive about what happened here. I would open a TAC case and upload the tech support logs for review. They will be able to confirm your exact scenario and determine if there are other configuration changes that would improve your setup
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks